Minimum 5 years of professional experience in cybersecurity, information security, IT risk management or related areas.
Minimum 3 years of hands-on experience performing third-party security assessments, supplier security reviews, technology risk assessments or similar activities.
Demonstrated experience analyzing technical and security documentation and translating findings into actionable risk decisions.
Experience working in large enterprise environments with multiple stakeholders and governance processes.
Experience in collaborating with external suppliers and managing security-related discussions and follow-up activities.
Knowledge & Skills
Strong understanding of cybersecurity principles and risk management practices.
Practical knowledge of Third-Party Risk Management (TPRM), supply chain security and vendor risk assessment methodologies.
Experience assessing security controls against recognized frameworks and standards, including:
ISO 27001
NIST Cybersecurity Framework
SOC 2
NIS2
DORA
CIS Controls
Understanding of AI governance, AI-related risks and regulatory requirements such as the EU AI Act.
Experience working with internal corporate security policies, standards and compliance requirements.
Strong analytical, problem-solving and critical-thinking skills.
Excellent written and verbal communication skills in English.
Preferred Qualifications
CISSP, SSCP, CISM, CRISC or equivalent cybersecurity certifications.
ISO 27001 Lead Auditor, Lead Implementer or similar audit/compliance certifications.
Experience contributing to the design, implementation or improvement of security governance and risk management processes.
We are looking for a cybersecurity professional with strong experience in third-party risk management, security assessments and governance activities. The successful candidate should be comfortable assessing a broad range of technologies and services, working with international suppliers and navigating complex enterprise environments. ,[Third-Party Security Assessments, Perform security risk assessments of third-party suppliers, products and services, including SaaS solutions, COTS applications, cloud services, hardware and OT-related solutions., Review supplier responses, technical documentation, security reports and supporting evidence to assess security posture and identify potential risks., Analyze identified risks, address the points of non-compliance, and provide clear, risk-based recommendations., Engage directly with suppliers and internal stakeholders to clarify security, compliance and risk-related matters., Stakeholder Advisory & Risk Governance, Act as a trusted advisor on third-party cybersecurity risks throughout supplier onboarding and lifecycle management processes., Collaborate with procurement, legal, compliance, business and cybersecurity teams to ensure security requirements are appropriately addressed., Ensure assessments align with internal security standards, policies and corporate requirements., Process Improvement & Development, Drive continuous improvement of the Third-Party Risk Management (TPRM) process, methodologies, and assessment practices., Identify process gaps, inefficiencies and improvement opportunities, proposing and implementing corrective actions., Monitor emerging threats, regulatory requirements and industry best practices to ensure the assessment framework remains effective and up to date.] Requirements: Security, risk management, SaaS, Cloud, Cybersecurity, ISO, NIST, CIS, AI, Communication skills, CISSP, CISM, Audit Tools: .
... employment. In this role you will: - Lead and enhance the EMEA Third-Party Risk Management (TPRM) program, aligning it with business, regulatory, M&A, and security objectives, - Oversee TPRM operations, including due diligence, risk assessments, exception management, and process scalability, - Deliver executive and regulatory ...
... Monitor emerging cyber threats, industry standards, and regulatory expectations. Level of Experience: 5+ years of hands-on experience in cybersecurity, technology risk, security engineering, or third-party risk management (TPRM)., Technical Assessment Skills: Proven track record of evaluating technical security controls, interpreting ...
Third-Party Cybersecurity Risk Specialist Miejsce pracy: Warszawa Your responsibilities - Conduct comprehensive technical security reviews of external vendors, SaaS providers, and third-party technology partners. - Evaluate security controls, technical architectures, data flows, and system integrations to identify potential ...
... sophisticated risk environment, providing technical expertise and guidance across a global organisation whilst contributing to the continuous improvement of third party risk management practices. Position Overview As Senior Manager, Third Party Risk, you'll provide technical expertise and guidance across the organisation's ...
... Vendor Due Diligence Specialist, you will play a key role in the company’s third-party information security risk management program. You will conduct technical security assessments of external vendors, evaluating their security controls, technology environments and potential risks associated with providing services to the firm. ...
... Vendor Due Diligence Specialist, you will play a key role in the company’s third-party information security risk management program. You will conduct technical security assessments of external vendors, evaluating their security controls, technology environments and potential risks associated with providing services to the firm. ...
Your responsibilities - Vendors Assessment Cycle: - Conducting information security risk assessments of third-party vendors, identifying potential threats, vulnerabilities, control and compliance gaps. - Providing recommendations on vendor selection based on risk analysis and security posture. - Continuously monitoring ...
... experience in data protection and cyber security., , As Vendor Risk Specialist you will be responsible for assessing, monitoring and managing the information security risks associated with third-party vendors of Pandora. The role is to ensure that vendors comply with Pandora’s information security policies, industry regulations ...